CVE-2026-117610

Name of the Vulnerable Software and Affected Versions libexpat versions prior to 2.9.1

Description A NULL pointer dereference occurs in the externalEntityInitProcessor2() function within lib/xmlparse.c due to the mishandling of the XML TOK NONE token when processing empty input. An attacker capable of controlling stream chunking can trigger an empty non-final first parse on an external entity subparser, which leads to an application crash during a subsequent parse.

Recommendations Update libexpat to version 2.9.1 or later.